
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/1BBD8C580BE911F187777A73343D8C67.roa
File: 1BBD8C580BE911F187777A73343D8C67.roa (raw, json)
Hash identifier: Khg9wPRObvvayQcBytp6PWB4psgr/LeDDZkUxOQ62uU=
Subject key identifier: 54:31:5E:26:BE:41:94:C9:83:5D:B4:C4:CF:7F:8F:F5:A1:C4:F7:BF
Certificate issuer: /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial: 05D5
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/1BBD8C580BE911F187777A73343D8C67.roa
Signing time: Sun 01 Mar 2026 18:52:09 +0000
ROA not before: Tue 17 Feb 2026 11:00:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 154500
IP address blocks: 151.158.166.0/23 maxlen: 23
151.158.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:23:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1493 (0x5d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Validity
Not Before: Feb 17 11:00:13 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a48ad9-8e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fb:c4:64:35:10:ac:01:d9:98:1e:ef:97:dc:
01:06:cb:13:a1:27:95:e6:9f:55:14:2b:e4:fc:4d:
14:23:fa:bf:ce:7b:27:df:ff:2c:44:1c:31:b2:d8:
bb:ab:64:aa:4d:c4:7c:bc:40:b2:2f:26:e7:c5:35:
fb:16:07:ac:4a:42:07:65:0a:33:28:11:c8:84:20:
56:73:12:1f:3c:d2:6b:c8:56:8f:c1:8f:f6:2f:a3:
3c:00:5c:1a:42:bf:b7:46:0b:00:85:eb:cc:40:8a:
84:85:ee:c6:24:01:16:0c:80:9a:90:6b:79:33:5f:
c1:dc:87:c4:42:84:44:e3:82:7c:65:3e:ab:83:2b:
5a:25:be:b6:b9:a0:7b:42:da:a3:6e:f8:74:44:86:
39:a6:f0:67:c3:db:9a:7f:55:ca:f0:c2:39:f7:9c:
87:06:58:79:06:7a:e4:12:71:41:ed:98:c0:e4:ff:
2e:f3:f6:2b:57:c3:de:03:8e:e0:8d:21:e6:6b:0a:
a1:30:48:1e:58:ce:89:ed:15:f7:73:5a:b0:4b:5d:
ec:e9:1a:fa:57:14:3c:08:75:a6:b2:ed:88:cd:44:
3c:84:67:27:5e:ba:f2:15:bd:c6:5d:70:9d:35:0a:
cc:c0:b2:3c:92:22:d3:f1:d6:40:ec:d0:14:77:19:
35:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:31:5E:26:BE:41:94:C9:83:5D:B4:C4:CF:7F:8F:F5:A1:C4:F7:BF
X509v3 Authority Key Identifier:
keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/1BBD8C580BE911F187777A73343D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.166.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:16:e3:b0:80:d3:d7:ce:5a:99:c7:6b:a3:e5:f7:9b:a0:67:
2c:b8:a1:90:4f:61:c1:91:a4:64:40:99:30:0a:66:fc:ed:6f:
1f:d0:29:ef:3e:a9:de:f1:ae:e7:c9:8c:66:29:6a:64:2a:f5:
96:a7:ad:0c:72:b9:90:83:36:91:94:29:30:ac:57:4d:a2:59:
a6:38:0f:c7:76:f1:d9:30:df:8d:07:07:3e:02:24:8d:ed:80:
7d:82:23:2e:d6:2d:98:d3:d6:ff:5e:6c:69:d5:38:a4:81:d9:
e7:56:a4:62:18:7b:e2:bb:6b:62:72:d5:4c:e2:72:f3:c9:7c:
5d:89:e7:1f:ac:74:dd:75:cd:60:53:a6:83:7a:92:4c:c5:ec:
78:9a:23:1a:65:b3:07:39:3d:f6:69:cd:30:22:ac:55:be:8c:
6a:79:d5:c9:1b:9e:46:75:a2:d0:5c:6d:41:ad:1c:c6:f7:08:
22:c8:e3:f8:75:29:f0:69:9b:37:a2:85:13:18:93:90:b8:85:
49:67:6b:04:bf:4a:4f:65:27:66:bb:e0:a1:fd:05:dc:ad:c1:
c5:26:7c:d6:1d:bc:40:41:6a:87:96:5e:57:38:e6:ea:6c:17:
1a:29:44:22:ce:69:f2:f7:68:88:05:7d:6d:02:e7:b4:93:41:
6f:58:05:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:49:51 2026 by rpki-client